add allow_hosts stuff to README